Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1e04535b-d086-34a9-8637-4a3090cb4ca1.roa
File: 1e04535b-d086-34a9-8637-4a3090cb4ca1.roa (raw, json)
Hash identifier: /kC+cKECYln9TKOBd72PTH+HFOJ6/IDwRwqPB+j+GGg=
Subject key identifier: 21:65:83:A9:38:9D:98:F1:FF:01:51:5C:E6:85:7C:B9:CD:AE:D7:14
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F432858487FB5E31EE6E3CC5F514E0240
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1e04535b-d086-34a9-8637-4a3090cb4ca1.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 3356
IP address blocks: 204.167.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:e3:1e:e6:e3:cc:5f:51:4e:02:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=4ab05cdc-3d64-4c58-be96-8ad843efa231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:4e:c2:4f:78:2f:d5:22:8c:5b:9c:c3:3c:
fc:86:94:cb:bc:06:91:a9:fd:96:89:6e:20:cc:95:
4d:b6:65:5c:03:f5:cb:86:7a:12:05:d9:9f:90:2c:
66:bb:b6:44:07:7a:bb:bb:02:df:10:95:68:e6:dd:
f3:f5:d3:90:09:c1:53:fe:21:fa:10:54:5d:16:b4:
71:4d:43:15:b5:fd:c6:91:58:53:0f:59:bf:3d:5e:
7f:30:63:c1:54:3c:6e:6a:1d:c0:c1:f6:d7:7e:30:
36:9a:d5:1c:c6:db:cd:6e:d7:cd:c9:33:67:72:77:
bf:02:01:8d:22:d9:ff:6a:70:69:23:21:2f:75:1d:
c5:5c:a4:fe:39:5a:94:4c:68:cc:25:bd:bb:21:43:
3c:fa:42:ce:69:0d:5d:34:93:6d:0c:8f:d3:de:37:
e5:4b:a1:4b:6c:ad:47:73:11:06:0c:fb:c2:c2:fc:
6a:03:27:83:a6:c3:fc:eb:29:b3:a6:15:23:e7:95:
62:2a:03:12:d2:1e:ce:00:8f:ff:7c:00:90:fa:b9:
e0:04:bc:e8:28:1b:7b:2a:cb:f3:41:e9:4c:3d:34:
85:6e:63:31:8a:a2:74:6c:d2:e6:ea:52:92:8c:10:
a1:eb:5d:63:ef:69:1c:4f:56:84:f4:26:15:4f:17:
3d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:65:83:A9:38:9D:98:F1:FF:01:51:5C:E6:85:7C:B9:CD:AE:D7:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1e04535b-d086-34a9-8637-4a3090cb4ca1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
204.167.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:74:9d:fb:3d:29:c3:dd:f3:cf:9e:28:52:af:69:db:d2:bf:
26:78:07:2f:86:9c:42:41:73:2d:ed:15:b1:07:bc:30:74:d5:
64:de:83:63:a7:fc:e1:7a:92:10:b0:7e:37:6d:9f:12:1c:68:
a9:15:d4:bb:b1:f4:72:cf:50:c5:be:09:96:d1:ce:ba:d1:be:
d3:eb:52:66:80:05:c7:ff:69:d1:b1:22:4d:27:c5:26:22:6f:
c7:1e:18:40:97:49:d0:d5:b2:00:d9:e9:bf:30:d3:f0:02:e1:
6e:5c:38:21:a8:e0:64:cb:73:a7:43:f1:c6:63:f9:19:08:ea:
87:9f:21:55:30:17:ca:1f:db:aa:b8:de:ce:61:70:d8:e5:f6:
52:30:30:cd:36:56:c0:4a:e3:0e:2e:46:72:4a:11:4d:65:03:
33:b2:f1:94:28:e6:66:20:f0:03:05:cc:d8:b2:5f:53:75:82:
b3:21:18:6e:6f:30:db:7a:4d:38:0c:3a:8a:10:80:7e:8e:60:
fb:8a:86:16:e6:d0:89:20:99:ae:46:86:fc:bc:7a:c8:52:ce:
5f:d1:93:3e:8b:76:76:f7:c6:5f:56:d7:f4:32:85:97:ed:d5:
44:1f:a7:6b:0a:f9:c1:a0:70:25:e2:01:ef:b2:ff:85:ba:cc:
84:5a:1f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:26:43 2025 by rpki-client